Impact
A memory corruption flaw, classified as CWE-119, was discovered in Apple’s operating systems. The vulnerability stems from improper state management and can be triggered by an application. When exploited, it leads to uncontrolled crashes or unexpected termination of the operating system, effectively denying service to legitimate users. No elevation or data‑exfiltration capabilities were reported in the CVE description, so the primary concern is loss of availability rather than confidentiality or integrity.
Affected Systems
Apple iOS 18.3, iPadOS 18.3 and 17.7.7, macOS Sequoia 15.3, macOS Sonoma 14.7.5, macOS Ventura 13.7.5, tvOS 18.3, visionOS 2.3, and watchOS 11.3 are all mentioned as affected. Devices running any of these OS versions should be evaluated for exposure.
Risk and Exploitability
The CVSS base score of 5.5 indicates a medium severity vulnerability, while the EPSS score of less than 1% suggests that exploitation is currently unlikely to be widespread. The vulnerability is not listed in the CISA KEV catalog. The attack vector is not explicitly described in the official advisory, but it is inferred that an app could invoke the flaw, potentially requiring local user execution or privileged app privileges. Because the exploit terminates or crashes the system, it primarily impacts availability rather than providing access to data.
OpenCVE Enrichment
EUVD